Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer (raw, json)
Hash identifier: Ry8NID4E8yhUFCaLZB2bak+eOfoMPA5pVWEqU/LTTao=
Subject key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5011F65DFFA4A285BF2D4137C99F6E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48945
IP: 93.186.144.0/20
IP: 185.11.36.0/22
IP: 2a03:7e80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Apr 2024 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1f:65:df:fa:4a:28:5b:f2:d4:13:7c:99:f6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:79:3b:87:f3:10:ae:b4:e9:fd:df:ab:bb:
ac:30:6f:60:80:71:0b:f2:50:af:a5:fd:19:50:46:
b7:39:c3:33:e4:dd:92:4c:3c:e4:c4:89:59:e3:1e:
fb:ff:95:5e:71:49:05:45:7a:0c:d4:44:b7:34:70:
54:38:c0:70:0a:a3:e7:df:95:9e:b4:ce:dc:88:4c:
67:7c:f8:ee:66:de:f7:cf:fa:7c:58:54:97:d8:29:
6f:1c:7a:2a:62:50:92:72:66:fd:51:ca:f4:67:03:
c7:50:b6:f4:ea:7d:4f:fe:a8:91:21:a0:50:24:88:
4d:22:8b:3f:d9:53:62:3f:b0:2b:24:ed:ed:49:1a:
08:e7:39:a0:61:f9:ba:e1:e3:42:bd:4a:9b:79:6b:
81:4e:77:e5:91:df:77:04:86:75:1e:1e:0a:1a:7a:
06:a1:5e:d2:38:10:ef:be:67:c5:5a:86:da:8a:ca:
87:ec:7b:ce:38:10:9f:d8:66:e2:7f:04:1a:eb:8e:
45:21:ef:c9:c2:60:da:cc:94:28:78:65:02:c1:fc:
45:2e:95:9e:7f:2c:76:ce:56:73:89:75:d3:68:ff:
10:14:84:4c:03:2f:60:eb:bd:e3:69:f7:89:3c:80:
4c:e7:36:fe:5d:b2:5b:14:e7:c2:f2:18:b1:d5:b6:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.144.0/20
185.11.36.0/22
IPv6:
2a03:7e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48945
Signature Algorithm: sha256WithRSAEncryption
8f:6f:3d:28:5f:10:c5:e2:2d:03:40:83:a4:cf:26:44:98:22:
9e:3d:63:e0:bf:a8:7f:d5:8f:1a:02:8b:47:ca:0b:f4:0c:e1:
23:b0:59:da:80:4b:86:f0:eb:01:15:db:9c:e2:3d:83:1c:e4:
6d:7b:80:37:0d:dd:60:e4:57:ac:8c:bd:2e:cc:c2:a2:e4:f3:
87:fb:a7:8c:6e:b2:37:3f:4b:c0:b0:f6:fa:ec:f4:93:c0:2a:
d9:28:a6:9d:a4:12:0d:74:da:0d:dc:f1:29:fa:6e:8a:55:c6:
7a:a4:34:6d:8d:56:7a:c0:28:03:1e:7d:a5:46:50:11:01:ad:
d7:19:a1:d9:ca:85:4a:2e:4e:42:69:0a:71:48:6d:c1:80:d3:
34:b7:59:18:13:6b:94:01:bf:f5:ce:5d:c5:99:66:7a:17:58:
42:27:e6:33:8f:ed:ad:c0:19:25:c1:bb:11:bd:b9:88:ad:89:
cd:15:fb:76:39:61:3c:c8:57:de:46:9f:69:ee:76:a0:02:6c:
e3:4b:dd:24:72:5a:e5:46:72:ab:8e:e0:73:9b:00:2c:67:a3:
05:e0:ca:a0:4d:c1:e1:3d:89:a9:62:1a:7f:4e:8d:63:d9:6d:
d9:e0:9e:e2:37:b6:6f:99:97:a2:f2:84:81:74:7d:c7:16:42:
36:5c:b6:af
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzFAR9l3/pKKFvy1BN8mfbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWJkNWY1NDkwNWVlOGU0ZDI4MzBjNmNmNTBmNjBkMjY0MjAxYTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhx5O4fzEK606f3fq7usMG9ggHEL
8lCvpf0ZUEa3OcMz5N2STDzkxIlZ4x77/5VecUkFRXoM1ES3NHBUOMBwCqPn35We
tM7ciExnfPjuZt73z/p8WFSX2ClvHHoqYlCScmb9Ucr0ZwPHULb06n1P/qiRIaBQ
JIhNIos/2VNiP7ArJO3tSRoI5zmgYfm64eNCvUqbeWuBTnflkd93BIZ1Hh4KGnoG
oV7SOBDvvmfFWobaisqH7HvOOBCf2GbifwQa645FIe/JwmDazJQoeGUCwfxFLpWe
fyx2zlZziXXTaP8QFIRMAy9g673jafeJPIBM5zb+XbJbFOfC8hix1bY0owIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFA69X1SQXujk0oMMbPUPYNJkIBqTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2I1OTM5
Yi1kYWE3LTRmNDctOTg3My02NGEyN2U5NzdmZDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYjU5Mzli
LWRhYTctNGY0Ny05ODczLTY0YTI3ZTk3N2ZkOS8xL0RyMWZWSkJlNk9UU2d3eHM5
UTlnMG1RZ0dwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQEXbqQAwQCuQskMA0EAgACMAcDBQMqA36AMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/MTANBgkqhkiG9w0BAQsFAAOCAQEAj289
KF8QxeItA0CDpM8mRJginj1j4L+of9WPGgKLR8oL9AzhI7BZ2oBLhvDrARXbnOI9
gxzkbXuANw3dYORXrIy9LszCouTzh/unjG6yNz9LwLD2+uz0k8Aq2SimnaQSDXTa
DdzxKfpuilXGeqQ0bY1WesAoAx59pUZQEQGt1xmh2cqFSi5OQmkKcUhtwYDTNLdZ
GBNrlAG/9c5dxZlmehdYQifmM4/trcAZJcG7Eb25iK2JzRX7djlhPMhX3kafae52
oAJs40vdJHJa5UZyq47gc5sALGejBeDKoE3B4T2JqWIaf06NY9lt2eCe4je2b5mX
ovKEgXR9xxZCNly2rw==
-----END CERTIFICATE-----
Generated at Tue Apr 16 05:22:15 2024 by rpki-client on console-ams.rpki-client.org